| Event Id | 4713 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | Kerberos policy was changed. Subject: Security ID: <Security ID> Account Name: <Account Name> Account Domain: <Domain name> Logon ID: <Logon ID> |
| Event Information | Cause :This event is logged when it detects a change to the the domain's Kerberos policy. Kerberos policy is defined in GPOs linked to the root of the domain under Computer Configuration\Windows Settings\Security Settings\Account Policy\Kerberos Policy. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.